
$ rpki-client -vvf rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa
File: 3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier: 6k3KfUgMebFRM4pC7r1QhCv5uspLzr3pEAjgiqAAQyA=
Subject key identifier: AD:FC:8D:A0:0A:9E:FB:AE:31:CF:23:E4:1D:2C:53:90:5E:75:DC:60
Certificate issuer: /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Certificate serial: 473D72FBE4EC11D53E513E158D698B0145D820A1
Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa
Signing time: Mon 11 May 2026 16:34:10 +0000
ROA not before: Mon 11 May 2026 16:29:10 +0000
ROA not after: Mon 10 May 2027 16:34:10 +0000
asID: 20473
IP address blocks: 103.123.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl
rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:3d:72:fb:e4:ec:11:d5:3e:51:3e:15:8d:69:8b:01:45:d8:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Validity
Not Before: May 11 16:29:10 2026 GMT
Not After : May 10 16:34:10 2027 GMT
Subject: CN=ADFC8DA00A9EFBAE31CF23E41D2C53905E75DC60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:47:a1:31:b9:bc:be:cf:ac:2d:fb:c2:16:
d3:2a:2f:94:e0:f6:5f:35:6d:c5:4c:33:29:38:58:
78:e9:c7:ce:a5:09:3a:52:10:2a:c9:16:b9:03:e9:
ee:11:b5:30:ed:08:48:b9:bd:ea:11:b6:92:d0:f0:
69:cb:f2:bc:c0:05:d8:73:a0:9f:d0:c3:25:66:bd:
9d:e3:72:00:4b:e1:ef:67:0a:3e:3b:6d:99:07:04:
f8:8b:71:cc:5a:f9:d7:9d:7f:b6:99:c1:21:ed:c1:
ad:9a:a5:f2:a8:ad:f3:f5:ff:48:73:55:f1:90:54:
fd:fd:ba:74:94:0d:f4:20:97:6f:9c:af:22:95:94:
51:54:55:31:dc:41:42:5b:21:f9:39:54:ee:07:55:
19:fc:df:3a:c2:f2:c1:8b:86:cb:0c:73:67:8e:50:
d0:52:5b:32:89:07:e1:df:f1:87:38:c0:bf:9b:34:
16:d3:24:53:d3:62:17:7d:85:08:38:02:3f:e5:93:
21:f9:23:0d:a4:ee:02:ab:b5:58:f7:e0:a0:19:97:
73:51:af:9a:ac:7f:32:dc:7d:5e:0e:21:72:7e:88:
d6:58:ae:89:c7:65:76:d4:c8:96:1f:a8:40:8b:b0:
b2:e4:1b:13:62:e0:3b:1f:97:73:5e:56:1d:b4:2a:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FC:8D:A0:0A:9E:FB:AE:31:CF:23:E4:1D:2C:53:90:5E:75:DC:60
X509v3 Authority Key Identifier:
keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.128.0/22
Signature Algorithm: sha256WithRSAEncryption
12:05:c4:00:21:c3:0b:ee:9f:8e:8c:b8:2f:e9:2f:8a:15:ba:
c8:55:fd:08:39:18:b8:4d:dc:ed:5c:f2:a1:d1:61:27:98:02:
04:00:8f:ad:12:e1:7d:ef:56:19:33:f5:5c:80:fd:3e:e0:fa:
28:ce:8f:47:ba:c8:14:97:65:1b:96:c5:0a:c3:b5:d8:04:be:
b7:f7:65:11:78:71:7a:b8:bc:9d:80:79:62:2e:dd:26:62:bb:
cd:42:35:25:d6:80:ec:0e:0e:b3:28:2c:ca:71:a2:45:37:a1:
d1:23:b3:0d:e9:43:7e:2b:6a:78:9a:6b:82:34:66:4f:c7:9a:
10:57:8a:4d:82:01:5e:3c:ad:78:04:47:55:da:f3:f3:8e:18:
0d:1b:a5:d3:32:ba:b3:0e:1f:a8:6e:b3:75:99:2d:f6:6c:15:
30:a5:80:4c:c3:79:f9:4e:7f:9d:73:57:2b:ac:d4:b0:c0:39:
8d:db:77:c7:55:ee:e8:80:8f:93:e2:82:fd:7d:72:b6:dd:a9:
82:3d:2c:1a:f8:25:67:c4:ea:07:56:ba:e2:d2:4e:9e:ff:9f:
f4:48:f0:05:08:26:00:18:83:b3:b0:e3:6d:9b:7b:e8:a0:5e:
a5:83:f4:f3:c0:e9:7b:86:3c:30:1b:1b:63:92:e5:0e:22:cf:
44:10:d2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:25 2026 by rpki-client